parthav99/VulnAdvisor — Python reachability triage
Reachability-ranked Python security scanning (SCA + SAST) with evidence-backed confidence tiers. Runs entirely inside your runner — no telemetry, code never uploaded.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to scan. | no | . |
| fail-on | Fail the step at this band or score (critical|high|medium|low or 0-100). | no | high |
| format | Report format: terminal, json, or sarif. | no | sarif |
| output-file | File to write the report to (ignored for terminal format). | no | vulnadvisor.sarif |
| new-only | Gate only on findings introduced since --base (never block on legacy debt). | no | false |
| base | Base git ref for --new-only diffing. | no | "" |
| version | vulnadvisor version to install (empty = latest from PyPI). | no | "" |
| python-version | Python version to set up. | no | 3.12 |
| extra-args | Extra arguments appended to the scan command verbatim. | no | "" |
Outputs
no outputs